Search for packages
| purl | pkg:deb/debian/node-deep-extend@0.4.1-2?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-k6bh-s1cq-n3a7 | Improper Input Validation The utilities function in all versions of the deep-extend node module can be tricked into modifying the prototype of `Object` when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all objects. |
CVE-2018-3750
GHSA-hr2v-3952-633q |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-02T04:31:17.551774+00:00 | Debian Importer | Fixing | VCID-k6bh-s1cq-n3a7 | https://security-tracker.debian.org/tracker/data/json | 38.6.0 |
| 2026-04-16T13:15:45.216837+00:00 | Debian Importer | Fixing | VCID-k6bh-s1cq-n3a7 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T09:07:59.494255+00:00 | Debian Importer | Fixing | VCID-k6bh-s1cq-n3a7 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:47:06.651046+00:00 | Debian Importer | Fixing | VCID-k6bh-s1cq-n3a7 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |